chore(paddle)(deps-dev): bump vercel from 54.20.1 to 58.4.4 in /paddle-webhook

[dependabot]

Bumps vercel from 54.20.1 to 58.4.4.

Release notes

Sourced from vercel's releases.

vercel@58.4.4

Patch Changes

• dcadcad: Trigger a new release to publish versions that were skipped by the failed release run.

vercel@58.4.0

Minor Changes

• a928d5a: Add vercel ai-gateway budgets defaults (list/set/remove) to manage per-scope AI Gateway budget defaults (project and api-key), each with its own limit and refresh period

Patch Changes

• Updated dependencies [2c75803]
• Updated dependencies [57dec92]
  • @​vercel/build-utils@​13.36.2
  • @​vercel/backends@​0.8.29
  • @​vercel/container@​0.1.0
  • @​vercel/elysia@​0.1.106
  • @​vercel/express@​0.1.120
  • @​vercel/fastify@​0.1.109
  • @​vercel/go@​3.10.2
  • @​vercel/h3@​0.1.115
  • @​vercel/hono@​0.2.109
  • @​vercel/hydrogen@​1.4.0
  • @​vercel/koa@​0.1.89
  • @​vercel/nestjs@​0.2.110
  • @​vercel/next@​4.20.4
  • @​vercel/node@​5.9.2
  • @​vercel/python@​6.54.0
  • @​vercel/redwood@​2.5.0
  • @​vercel/remix-builder@​5.9.1
  • @​vercel/ruby@​2.5.1
  • @​vercel/rust@​1.4.0
  • @​vercel/static-build@​2.11.12

vercel@58.3.0

Minor Changes

• 0f04613: Add vercel vcr permissions subcommands for managing which teams can pull images from a VCR repository: vcr permissions <repository> ls lists teams with access (by team slug), add and rm grant or revoke access for one or more teams (comma-separated team ids or slugs), and clear removes access for every team.

• 17ee736: Replace the vercel-workers integration for Python queue subscribers and workflows with the new vercel-queue SDK:

  • [[tool.vercel.subscribers]] entrypoints are introspected at build time via vercel.queue.get_subscriptions() and served through generated vercel.queue.asgi_app() handler modules, with queue/v2beta triggers carrying the SDK-registered consumer groups and per-subscription tuning.
  • Celery and Dramatiq projects get the matching vercel-celery/vercel-dramatiq integration package injected automatically (bundled variant unless vercel-queue is an explicit dependency), in builds and in vercel dev.
  • [[tool.vercel.workflows]] entrypoints follow the SDK generation: projects on vercel >= 0.8.0 are served through vercel-queue like subscribers; older or undeterminable versions keep the legacy vercel-workers serving (worker env markers, injected pinned vercel-workers).
  • Projects that depend on vercel-workers directly keep the legacy integration wholesale: legacy subscriber schema, direct entrypoint serving, worker env markers.
  • vercel dev serves queue sidecars through vercel.queue.asgi_app() for new-SDK projects, and its queue broker delivers with the SDK-registered consumer groups introspected at sidecar startup (matching production trigger behavior); legacy projects keep the vercel-workers bootstrap.
  • The CLI no longer injects config.hasWorkerServices; the Python builder makes all queue-serving decisions from project metadata.

• 5fc4930: Rename the vc edge-config command to vc global-config, keeping edge-config working as an alias for backwards compatibility.

... (truncated)

Changelog

Sourced from vercel's changelog.

58.4.4

Patch Changes

• dcadcad: Trigger a new release to publish versions that were skipped by the failed release run.

58.4.3

Patch Changes

• 5f49021: Add --protection-password to vercel project protection enable so deployment protection passwords can be set from the CLI when used with --password.
• 230fe53: Made non-interactive project inspection fail instead of linking when project context is unresolved, and corrected Vercel CLI skill guidance for project resolution, pull outputs, and browser authentication flows.

58.4.2

Patch Changes

• a69c714: Propagate per-function maxConcurrency configuration into build outputs and keep every configured Next.js route in its own Lambda group, including routes with the same limit.
• 2d84055: Skip legacy Sensitive Environment Variables Policy in vercel env add and vercel env update when VERCEL_ENV_VAR_CONFIG_SECRET_UI is set, and send visibility (config/secret) on create and update requests when not explicitly set via --visibility (omitted for public-prefixed keys that cannot use secret visibility). Development still disallows secrets.
• 682bf8b: Fix login device-flow unit tests under CI: clear CI when asserting browser open, and read already-flushed stderr via getFullOutput.
• c006a5f: Fix pagination for the vercel teams members command.
• 654e898: Type shared function settings in container image build outputs.
• ae08009: Remove auto-opt-in of vercel team members to the native CLI binary.
• 8b8a729: Added support for adding and removing variants with vercel flags update. For example, use vercel flags update checkout-flow --add-variant treatment="Treatment" to add a variant, or vercel flags update checkout-flow --remove-variant legacy --yes to remove one.
• Updated dependencies [a69c714]
• Updated dependencies [654e898]
  • @​vercel/build-utils@​13.36.3
  • @​vercel/next@​4.20.5
  • @​vercel/static-build@​2.11.13
  • @​vercel/backends@​0.8.30
  • @​vercel/container@​0.1.0
  • @​vercel/elysia@​0.1.107
  • @​vercel/express@​0.1.121
  • @​vercel/fastify@​0.1.110
  • @​vercel/go@​3.10.2
  • @​vercel/h3@​0.1.116
  • @​vercel/hono@​0.2.110
  • @​vercel/hydrogen@​1.4.0
  • @​vercel/koa@​0.1.90
  • @​vercel/nestjs@​0.2.111
  • @​vercel/node@​5.9.3
  • @​vercel/python@​6.54.1
  • @​vercel/redwood@​2.5.0
  • @​vercel/remix-builder@​5.9.1
  • @​vercel/ruby@​2.5.1

... (truncated)

Commits

• 6331571 Version Packages (#17320)
• 9c77cd9 Version Packages (#17316)
• 230fe53 fix(skills): correct Vercel CLI project context guidance (#17290)
• 5f49021 feat(cli): add --protection-password to project protection enable (#17312)
• 442cd81 Version Packages (#17302)
• 682bf8b [client] Don't re-add .vercelignored files via filePathMap in prebuilt de...
• c006a5f Fix teams members pagination (#17246)
• 8b8a729 [flags] Add --add-variant and --remove-variant to vercel flags update (#16927)
• ae08009 [CLI] Remove native binary auto-opt-in for vercel team members (#17305)
• a69c714 Add per-function maxConcurrency build support (#17177)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: paddle. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
4da-home	Ready	Preview	Aug 3, 2026 6:14am